Name: Détecter les incidents d’identités ne suffit pas à stopper une attaque zero day
Start: 2022-06-28T09:00:00Z
End: 2022-06-28T09:42:07.000Z
Location: BrightTALK
Rating: 0

CrowdStrike™ is a leading provider of next-generation endpoint protection, threat intelligence, and pre- and post incident response services. CrowdStrike Falcon is the first true Software as a Service (SaaS) based platform for next-generation endpoint protection that detects, prevents, and responds to attacks, at any stage - even malware-free intrusions.

As organizations migrate more services and applications to the cloud, adversaries have shifted their focus to exploit a broader attack surface.

From vulnerability exploitation to credential theft, attackers are going after any weak points that allow them to compromise the ever-growing amount of critical business data and applications hosted in the cloud.

We will share insights into today’s top cloud security threats and  cloud vulnerabilities, along with best practices to address them. Join the workshop to learn:
• The top cloud security threats in 2022
• The main cloud security adversaries
• The most targeted cloud vulnerabilities
• What you can do to ensure effective cloud security

Speakers:
• David Puzas (Sr. Product Marketing Manager, Cloud Security), 
• Scott Fanning (Sr Director, Product Management), 
• Joshua Shapiro (Sr. Manager, Strategic Threat Advisory Group)

Combating the Rise in Threats to Cloud Environments [NAM]

As organizations have rapidly migrated to the cloud, adversaries have honed their craft to exploit the gaps that leave businesses vulnerable to cyberattack. In this CrowdCast, we take an adversary-focused approach to defend against three commonly exploited attack vectors: supply chain, cloud environments and user identities.

Join CrowdStrike to:
• Learn why taking an adversary-focused approach helps security and incident response teams focus their resources and proactively apply defenses
• Understand how global cloud adoption and remote work has left organizations vulnerable to cyberattacks
• Learn how real-world adversaries are currently exploiting cloud misconfigurations, user identities and supply chains
• Gain access to best practices to defend against sophisticated adversary attacks

Combating Advanced Supply Chain, Cloud and Identity-Based Attacks [NAM]

Combating Advanced Supply Chain, Cloud and Identity-Based Attacks [EMEA]

The financial sector – from banks to insurance – is a beloved victim for cyber criminals looking for a quick payday. The lack of security consistency across disparate environments highlights the need to evolve cybersecurity programs across the financial sector. Theft of funds continues to be the greatest threat facing this sector from cyber threat adversaries with a glaring focus on access and cryptocurrency. 

Join CrowdStrike as we embark on an adversarial journey through a COVID fuelled landscape with nation State and eCrime actors, combined with espionage, intrusions, big game hunting (BGH) and access brokers.

Webinar highlights include:
• Continuation of financially motivated operations
• COVID-19 pandemic and shifts in adversary tradecraft
• Big game hunting as well as enablement and commodity services targeting the finance sector

Cyber Threat Insights For The Financial Sector [NAM]

Join the Falcon Complete Team for a live Attack & Defend Demo. In this scenario we will showcase ITP managed by Falcon Complete. The scenario entails a kerberoasting type attack taking place that leads to a service account compromise that is then used to laterally move in the environment. 

You will be able to highlight the following in this scenario:

• Falcon Complete’s managed service of monitoring and actioning ITP incidents
• Policy creation to block accounts
• How this can also help prevent further lateral movement to unmanaged hosts in the customer environment

Please register now and we hope you can join us.

Live Attack & Defend Demo [EMEA]

Cyber Threat Insights For The Financial Sector [APJ]

Before the rise of cloud computing, enterprises could expect to be responsible for securing the systems in their data centers, their applications — everything. Because of the complexities of the threat landscape and organizational environments, security and DevSecOps teams have struggled to stay ahead.

Today, more and more organizations are migrating systems in part or wholly to the cloud, and cloud service providers are ready, willing and able to ease the security burden through the shared responsibility model. We welcome you to come learn the best practices for securing your cloud in this CrowdCast with CrowdStrike and AWS.

Attend this webcast to:
• Understand the composition of cloud environments and the technologies that are driving adoption
• Take a deep dive into the challenges of moving to the cloud and having a cloud infrastructure
• Learn key best practices to secure your organization’s public cloud platforms
• Find out how automation of DevSecOps processes and controls can help keep pace with the security you need

Best Practices for Securing Public Cloud Platforms with CrowdStrike & AWS [NAM]

This webinar will be delivered by the CrowdStrike Falcon Complete team where they will respond live to an exploit leveraging a vulnerable public facing web server. A Threat Actor has placed a WebShell on the host, leading to reconnaissance, privilege escalation and credential dumping activity.

You will see Live how the Falcon Complete team act as an extension of our customers’ security teams to quickly detect and disrupt this sophisticated attacks.

We hope you can join us.

WebShell Intrusion Live Attack & Defend Demo [EMEA]

The Manufacturing industry is one of the most highly targeted industries, both from a nation state and ecrime perspective. The often-critical nature of manufacturing operations and the valuable data that many manufacturing businesses hold make them an enticing target for adversary groups seeking to extract value and further their strategic objectives. 
 
Join us  for this session with Scott Jarkoff, CrowdStrike’s Director, Strategic Threat Advisory Group for APJ & EMEA where he will discuss trends across 2021 and attacks targeting manufacturing, as well as ways to proactively defend your mission critical assets from being breached.
 
Agenda:
- Introductions
- Manufacturing at a glance
- Adversaries & Threat trends
- The Emerging Threat

CrowdStrike Manufacturing Threat Intel Webinar [NAM]

Cyber Threat Insights For The Financial Sector [EMEA]

CrowdStrike Manufacturing Threat Intel Webinar [APJ]

Modern attacks like ransomware have been around for quite some time. According to the 2021 CrowdStrike Global Security Attitude Survey, 66% of organizations suffered at least one ransomware attack in 2021, and there is an 82% increase in ransomware-related data leaks from 2020 to 2021 per the 2022 CrowdStrike Global Threat Report. With evolving adversarial tactics and techniques behind modern attacks, it’s no surprise that ransomware is one of the key drivers for cyber insurance.

Join our panel from CrowdStrike and Marsh as we explore the latest in cyber insurance trends, and how a strong identity protection strategy can help organizations accelerate their cyber insurance initiatives.

In this session, you will learn:
• About the cyber insurance state of the market
• Discuss how identity protection is critical for cyber insurance
• Key observations and recommendations from Marsh

Speakers:
• CJ Dietzman, Managing Director and Cyber Security Marketplace Leader, Marsh Specialty
• Adam Cottini, Director of Business Development Law Firm & Insurance, CrowdStrike
• Narendran Vaideeswaran, Director Product Marketing, CrowdStrike

Fast Track Your Cyber Insurance Initiatives With Identity Protection [NAM]

Maintaining security consistency across our own data center and public cloud environments, along with the use of multiple cybersecurity controls are major challenges that organizations face today that not only increase costs and complexity, but also create silos, leaving major security gaps.

Join Doug Cahill, VP of Analyst Services and Sr. Analyst at ESG, and David Puzas, Sr. Product Marketing Manager at CrowdStrike in a webcast discussion.

This CrowdCast will cover:

• Current security challenges
• The different attack types
• How to leverage visibility and threat intelligence to achieve security consistency from endpoint to workloads, and 
   everywhere in between

Protecting Against Endpoint To Cloud Attack Chains

Identity is the front line in the battle against modern cyber threats. Nearly 80% of cyberattacks leverage compromised credentials to gain access and evade detection. These attacks often come in via unmanaged or rogue endpoints, legacy systems, supply chain vendors or other attack vectors that are outside the scope of endpoint-centric security controls.

Join CrowdStrike experts as they will unpack the current state of identity-based threats and how Falcon Complete managed detection and response is changing the game for security teams. In this webcast, you’ll hear:

• Insights from Falcon OverWatch elite threat hunters, who’ll share trends and stories about how today’s attackers are obtaining and abusing credentials, and. 
blending in with day-to-day activity
• How the Falcon Complete team of security analysts are leveraging identity threat protection to keep ahead of the evolving threats
• Guidance you can use to protect your own organization from identity-based threats

Reinventing MDR With Identity Threat Protection

According to one estimate, there will be 29.3 billion networked devices globally by 2023. Organizations and security teams are facing challenges like never before when it comes to protecting the expanding perimeter of dynamic, cloud-based endpoints. Visibility and scalability for endpoint protection is key. Threats evolve, your endpoint security should too. 

In this webinar you will: 
• Discover how legacy endpoint solution are costing you team and technology efficiencies
• See how attack sophistication and evolution drive a parallel need for modern endpoint security 
• Learn about 5 critical capabilities you need to secure endpoints
• Get a first-hand view into the CrowdStrike Falcon Platform to see how easy it is to up your endpoint security

5 Critical Capabilities To Go From Legacy To Modern Endpoint Security

For security teams on the front lines and those of us in the business of stopping breaches, 2021 provided no rest for the weary. In the face of the massive COVID-driven social, economic and technological shifts of 2020, adversaries again refined their tradecraft to become even more sophisticated and brazen.

Understanding the 2021 dynamics of adversary tactics is critical for staying ahead of today’s threats. This is the context that the CrowdStrike 2022 Global Threat Report delivers.

Join our webcast featuring CrowdStrike SVP of Intelligence Adam Meyers as he examines the notable threats, events and trends in the 2022 report. Receive pragmatic recommendations to help you better defend against cyberattacks in 2022 and beyond.

Highlights include:
• Ransomware and the ever-adaptable adversary
• Iran and the new face of disruptive operations
• The emergence of China as leader in vulnerability exploitation
• Log4Shell sets the internet on fire
• Increasing threats to cloud environments

2022 Global Threat Report

The recently discovered Log4j vulnerability has serious potential to expose organizations across the globe to a new wave of cybersecurity risks as threat actors look to exploit this latest vulnerability and execute their payloads.

And an immediate challenge that every organization faces is simply trying to understand exactly where you have applications that are using this very popular Java library.

Join CrowdStrike Services James Perry and Matt Harvey as they provide observations directly from the front lines of incident response and share information about how they are helping to solve some of the key challenges surrounding Log4j.

In this session, you will learn about:
• Background on the Log4j vulnerability
• Observations from the CrowdStrike incident response team
• Insights from our Log4j investigations
• Recommendations to mitigate the risk of an attack
• Tools and techniques to find and patch Log4j instances

Log4j: A View From the Frontlines [APJ]

Log4j, noPac: pourquoi auditer l’AD et détecter les incidents d’identités ne suffit pas à stopper une attaque zero day?

- Vous découvrirez le rôle prépondérant que joue l’identité dans les attaques modernes
- Vous apprendrez comment 2 récentes vulnérabilités de type Zero Day (Log4J, noPac) sont exploitées pour perpétrer des attaques modernes et à quelle vitesse les adversaires peuvent compromettre un domaine AD
- Vous comprendrez qu’améliorer l’hygiène de son AD et détecter des incidents liés aux identités sont des mesures nécessaires mais pas suffisantes et que seule la prévention en temps réel peut empêcher un adversaire de mener son attaque à terme.

Détecter les incidents d’identités ne suffit pas à stopper une attaque zero day

Cyber Attacks

Cyber Crime

Cyber Defence

Cyber Incident Response

Cyber Intelligence

IT Security

Ransomware

Welcome to the mobile computing community on BrightTALK! With the consumerization of IT and the widespread adoption of mobile devices across the globe, mobile computing has become an important part of many people's lives in a culture of bring your own device (BYOD). With mobile devices doubling as work phones and more employees working from home, businesses need to provide secure access to data and work applications from anywhere at any time. Join this growing community and hear from industry thought leaders in webinars and videos as they share their insight on mobile computing research and trends.

Mobile Computing

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Détecter les incidents d’identités ne suffit pas à stopper une attaque zero day

Presented by

About this talk

More from this channel